CLAIMS 



1) (original) A method for controlling remote desktop access provided by an interactive 

grid computing system comprising: 

determining user policies based on a classification of a user; and 

providing a dynamic user account to said user, wherein said dynamic user account is 

customized based on said user policies to limit access to resources on a remote desktop. 

2. (original) The method as described in Claim 1 fiirther comprising editing a desktop 
configuration file based on said dynamic user account to limit access only to user authorized 
icons on said remote desktop. 

3. (original) The method as described in Claim 2 further comprising displaying said user 
authorized icons on said remote desktop. 

4. (original) The method as described in Claim 1 further comprising editing a desktop 
configuration file based on said dynamic user account to limit access only to user authorized 
menu items on said remote desktop. 

5. (original) The method as described in Claim 4 further comprising displaying said user 
authorized menu items on said remote desktop. 
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providing a dynamic user account to said user, wherein said dynamic user account is 
customized based on said user policies to limit access to resources accessible through a 
remote desktop. 

12. (original) The computer readable medium as described in Claim 1 1 wherein said 
method further comprises editing desktop configuration files based on said dynamic user 
account to limit access only to user authorized icons on said remote desktop. 

13. (original) The computer readable medium as described in Claim 12 wherein said 
method fiirther comprises displaying said user authorized icons on said remote desktop. 

14. (original) The computer readable medium as described in Claim 1 1 wherein said 
method fiirther comprises editing desktop configuration files based on said dynamic user 
accoimt to limit access only to user authorized menu items on said remote desktop. 

1 5. (original) The computer readable medium as described in Cfaim 14 wherein said 
method fiirther comprises displaying said user authorized menu items on said remote 
desktop. 

1 6. (original) The computer readable medium as described in Claim 1 1 wherein said 
method fiirther comprises editing a list of applications accessible through a shell based on 
said dynamic user account to limit access to applications executable from said shell on said 
remote desktop. 
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6. (original) The method as described in Claim 1 further comprising editing a list of 
applications accessible through a shell based on said dynamic user account to limit access to 
user authorized applications executable from said shell on said remote desktop. 

7. (original) The method as described in Claim 1 further comprising editing a list of 
directories allowed for browsing based on said dynamic user account to limit access to user 
authorized files of a explorer on said remote desktop. 

8. (original) The method as described in Claim 1 fiirther comprising editing a list of 
commands executable from a shell based on said dynamic user accoxmt to limit access to user 
authorized conmiands executable from said shell on said remote desktop. 

9. (original) The method as described in Claim 1 fiirther comprising editing permissions 
of an application accessible from said remote desktop based on said dynamic user account. 

10. (original) The method as described in Claim 1 further comprising authenticating said 
user before determining said user classification. 

1 1 . (original) A computer readable medium comprising executable instructions which, 
when executed in a processing system, causes the system to perform the steps for a method 
of controlling remote desktop access comprising: 

determining user policies based on a classification of a user; and 
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17. (original) The computer readable medium as described in Claim 1 1 wherein said 
method further comprises editing a list of directories allowed for browsing based on said 
dynamic user account to limit access to user authorized files of a explorer on a remote 
desktop, 

18. (original) The computer readable medium as described in Claim 1 1 wherein said 
method further comprises editing a list of commands executable fi"om a shell based on said 
dynamic user accoxint to limit access to user authorized commands executable from said shell 
on said remote desktop. 

1 9. (original) The computer readable medium as described in Claim 1 1 wherein said 
method further comprises editing permissions of an application accessible from said remote 
desktop based on said dynamic user account. 

20. (original) The computer readable medium as described in Claim 1 1 wherein said 
method further comprises authenticating said user before determining said user classification. 

21 . (original) An interactive grid computing system for controlling remote desktop access 
comprising: 

a resource; 

a grid service access point coupled to said resource for receiving a request from a 
client for said resource; 
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a policy engine coupled to said grid service access point for determining user policies 
based on a classification of said client; 

a software agent coupled to said policy engine for assigning a dynamic user account 
for said resource to said client, wherein said dynamic user account is customized based on 
said user policies to limit access to said resource. 

22. (original) The interactive grid computing system as described in Claim 21 wherein 
said dynamic user account limits access to said resource by limiting access only to client 
authorized icons on a remote desktop of said resource. 

23. (original) The interactive grid computing system as described in Claim 22 wherein 
said client authorized icons are displayed on said remote desktop of said resource. 

24. (original) The interactive grid computing system as described in Claim 21 wherein 
said dynamic user account limits access to said resource by limiting access only to client 
authorized menu items on a remote desktop of said resource. 

25. (original) The interactive grid computing system as described in Claim 24 wherein 
said client authorized menu items are displayed oh a remote desktop of said resource. 

26. (original) The interactive grid computing system as described in Claim 21 wherein 
said dynamic user account limits access to said resource by limiting access to commands 
executable from a shell on a remote desktop of said resource. 
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27. (original) The interactive grid computing system as described in Claim 21 wherein 
said dynamic user account limits access to said resource by limiting access only to client 
authorized files of a file explorer on a remote desktop of said resource. 

28. (original) The interactive grid computing system as described in Claim 27 wherein 
said client authorized files of a file explorer are displayed on a remote desktop of said 
resource 

29. (original) The interactive grid computing system as described in Claim 21 wherein 
said grid service access point authenticates said user. 
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